IT Security Architecture Analyst II (Cybersecurity)

Emory•Atlanta, GA

8d•Remote

About The Position

The IT Security Architecture Analyst II works within Emory University's Enterprise Information Security team, partnering with Enterprise Security and other IT teams to identify, evaluate, and implement security controls for IT services supporting Emory University and Emory Healthcare. Services may operate at the individual, department, division, or enterprise level and may be on-premises, cloud-based, vendor-hosted, or custom-developed. The analyst contributes to security risk assessments, vulnerability research, vendor assessments, and recommendations for remediation or mitigation. The role evaluates solution architecture components and helps ensure security safeguards and controls are understood and followed. It also contributes to improving risk management processes and tools, developing risk analysis tools, and interpreting information security policies and requirements. The analyst collaborates with cloud engineering, security, IT, privacy, compliance, legal, procurement, research, and business teams, and may support other enterprise information security activities as needed. This is an experienced cybersecurity role requiring practical knowledge typically gained through advanced education and work experience. The analyst works semi-independently with periodic management check-ins, collaborates closely with the team, and communicates with IT leadership. Tasks can be performed remotely with occasional visits to an Emory University location. Eastern Time business hours may apply. Emory does not approve New Jersey, Alaska, Hawaii, U.S. territories, or locations outside the United States as primary work locations. Emory reserves the right to change the remote-work status with notice.

Requirements

Bachelor's degree and three years of related IT experience, including demonstrated experience in relevant information security domains and project management skills, or an equivalent combination of education, training, and experience.
Excellent project management and team participation skills.
Good written and verbal communication skills.
Solid background in IT solutions and security concepts, including their development, deployment, and administration.
Practical cybersecurity knowledge and ability to work semi-independently with periodic management check-ins.
Ability to collaborate with the analyst's team and communicate with IT leadership.

Nice To Haves

Experience or exposure to AI technologies, including chatbots, LLMs, machine learning, deep learning, generative AI, NLP, computer vision, and agentic systems.
Exposure to research cybersecurity, including human-subject research studies.
Exposure to cloud security fundamentals and AWS, Azure, or GCP.
Exposure to Microsoft-connected security concepts such as Entra, Graph API, and Fabric.
Programming fundamentals, code reviews, and API experience.
Exposure to architecture components such as systems, virtual machines, Docker, networking, databases and NoSQL, mobile apps, and authentication.
Experience in healthcare, university, research, cloud, or medium-to-large enterprise environments.
Knowledge of information security technologies, methodologies, and best practices in security architecture, vulnerability identification and safeguards, data protection, business continuity, and related security areas.
Security certifications such as SANS/GIAC, CISSP, CISA, CISM, AWS, GCP, or Azure.
Experience with cloud platform solutions.

Responsibilities

Contribute to and perform security risk assessments for IT solutions, including identifying, analyzing, and evaluating risks and recommending remediation or mitigation; hand off associated risks to the enterprise risk register management process.
Provide guidance to internal and external customers based on policies, published guidelines, best practices, and industry recommendations.
Research and analyze vulnerabilities and consult with internal and external customers about them.
Help ensure information security safeguards and controls are properly communicated and followed.
Assess IT solution providers and the applications, processes, vendors, and technologies used to support solutions across departments, divisions, and the enterprise.
Identify improvements to risk management processes and tools.
Collaborate with cloud engineering, Enterprise Information Security, IT, privacy, compliance, legal, procurement, research, and business units to protect institutional assets.
Apply IT, system architecture, security, and vendor risk assessment knowledge, and research new technologies and vulnerabilities.
Contribute to the development of risk analysis tools and provide functional guidance to customer teams conducting security risk assessments.
Assist with interpreting information security policies and requirements and determining their applicability.
Assess client vendors using risk assessment toolkits and frameworks such as HIPAA, HITRUST, SOC, and NIST; collect data and document compliance and non-compliance in written assessment reports.
Assess solution architecture components, including services, controls, networks, operating systems, databases, storage, application vulnerabilities, security configuration, virus prevention and remediation, encryption, network segmentation, remote access, and authentication.
Perform other information security tasks and projects, assist university or healthcare units across the enterprise as needed, and carry out other related duties.